Login with compat SSO email requires email address

matrix-org / matrix-authentication-service

OAuth2.0 + OpenID Provider for Matrix Homeservers

https://matrix-org.github.io/matrix-authentication-service/

Apache License 2.0

112 stars 32 forks source link

Login with compat SSO email requires email address #3112

Open dklimpel opened 2 months ago

dklimpel commented 2 months ago

What I did:

create a new user with cli without mail address
set email_change_allowed to false
login with SSO with Synapse-Admin with the new user
- login via /login, /complete-compat-sso
- MAS redirects to /add-email
- returns error 500

Apparently there is an obligation to use a mail address.

Version: MAS 0.10.rc0

sandhose commented 2 months ago

MAS still requires for now that users have a valid primary email address to do any kind of client login (compat or OAuth 2.0). The feature to make that optional is tracked in #1505 A way to work around this is to register the user using the CLI with a dumb email.

What's not normal is the 500 error you get on /add-email

matrixbot commented 1 month ago

For your information, this issue has been copied over to the Element fork of matrix-authentication-service: https://github.com/element-hq/matrix-authentication-service/issues/3112